Privacy Policy

1. General Provisions

This Privacy Policy ("Policy") governs the processing of personal data of users of the Qozgal mobile application ("App"). The data controller is Alippe Inc ("we", "us", "Developer").

By using the App, you agree to the terms of this Policy. If you do not agree, please do not use the App.

Qozgal is available on iOS and Android and is designed for tracking daily activity (steps), maintaining activity streaks, using "freezes", participating in a referral program, and monthly prize draws.

2. Data We Collect

During your use of the App, we may collect the following categories of data:

2.1 Profile Data

• First and last name;
• Username (nickname);
• Profile photo (avatar);
• Country and city of residence;
• Email address (provided by Apple or Google upon sign-in).

2.2 Authentication Data

• User identifier from Apple (Sign in with Apple) or Google (Google Sign-In);
• Access and refresh tokens (stored in encrypted form);
• Referral code (5 characters, generated at registration).

2.3 Activity Data

• Daily step totals, including a breakdown by synchronization source
• Step history by day;
• Streak data and freeze usage.

2.4 Technical Data

• IP address;
• Device type and operating system;
• App version.

Support chat and surveys

• Messages in the Qadam support chat, including replies
• Reply ratings from 1 to 5 and reports that an issue was not resolved
• A score from 0 to 10 and an optional comment in the “Would you recommend Qozgal to a friend?” survey (NPS)
• Translations, conversation summaries, topic labels and assessments of the tone of messages and comments

3. Health Data

The App requests access to step data through platform APIs:

• iOS: Apple HealthKit;
• Android: Google Health Connect.

We receive daily step totals, including totals by source. We do not collect or have access to medical records, diagnoses, lab results, heart rate data, sleep data, or any other health-related information

Raw step records remain on the device in the provider's secure storage (HealthKit or Health Connect). Synchronization sends daily counts and source information to our servers: platform, source identifier and name, and whether steps were entered manually

4. How We Use Your Data

Collected data is used for the following purposes:

• Displaying daily progress and activity statistics;
• Calculating and displaying activity streaks;
• Managing streak freezes;
• Determining eligibility for monthly prize draws;
• Operating the referral program;
• Ensuring authentication and account security;
• Improving App quality and functionality;
• Sending push notifications (with your permission);
• Responding to support inquiries.

We do not use your data for targeted advertising and do not sell it to third parties.

Qadam support chat

Qadam is an AI assistant whose replies are prepared using an OpenAI model. The Qozgal support team can read the conversation and reply themselves. We use reply ratings and survey responses to assess support quality and improve the App

To prepare a reply, the assistant receives messages, summaries of earlier conversations from the same day, and the following account information where available:

• Name, country, city, time zone, App language and number of days since registration
• Device platform and model, operating system and App versions, and the status of health data and notification permissions
• Steps today and daily counts for the last seven days including today, with dates and a breakdown by source: platform, source identifier and name, count and manual entry flag
• Time and source of the last synchronization
• Current and longest streak, freeze balance and limit, and dates of restored days
• Pro subscription status, product identifier, purchase store, expiry date and trial status
• Identifiers of current prize draws and whether the account participates
• Number of referrals and clan identifier and name

5. Data Storage

Your data is stored on DigitalOcean servers (European data center). We implement the following security measures:

• Encryption in transit: HTTPS/TLS for all connections between the App and server;
• Encryption at rest: database encryption at the disk level;
• Restricted access: only authorized personnel have access to production data.

Support conversations and survey responses are stored while the account exists. When the account is deleted, we erase message texts and translations, conversation summaries, support reply drafts and their translations, copies of support messages in notification storage, and survey comments and their translations from our systems

Numeric ratings and service metrics are retained and remain linked to the anonymized account

6. Sharing Data with Third Parties

We share data with the following service providers to the extent necessary for the purposes described in this Policy:

• Apple Inc.: providing Sign in with Apple (iOS)
• Google LLC: providing Google Sign-In and Health Connect access (Android)
• DigitalOcean LLC: cloud hosting and data storage
• OpenAI: a data processor for preparing Qadam's replies, translating correspondence for the support team and replies into the user's language, and analyzing support messages and survey comments

For the chat, we send OpenAI messages, summaries of earlier conversations from the same day and the account information listed in section 4. For survey analysis, we send the comment, App language and an internal response identifier, without adding that account context

On iOS, before the first chat message, the App asks for explicit consent to send messages and the account information listed above to OpenAI and provides a link to this Policy. A message cannot be sent without this consent

On iOS, a notice below the survey comment field explains that the Qozgal team can read the comment and that it will be sent to OpenAI for AI analysis, and asks users not to include personal data. The comment is optional

We do not sell your personal data to third parties. We do not share data with advertising networks, data brokers, or other commercial organizations without your explicit consent.

We may disclose data if required by law, court order, or other mandatory directive from a competent authority.

7. Your Rights

You have the following rights regarding your personal data:

• Access: the right to obtain information about what data we process about you;
• Rectification: the right to correct inaccurate or incomplete data;
• Erasure: the right to request deletion of your data ("right to be forgotten");
• Portability: the right to receive your data in a structured, machine-readable format;
• Objection: the right to object to the processing of your data for certain purposes.

To exercise any of these rights, contact us at support@qozgal.app.

8. Data Deletion

You can delete your account in two ways:

• In the App: Settings → Delete Account;
• By email: send a request to support@qozgal.app with your email or username.

Deleting the account anonymizes identifying profile data and erases support and survey texts as described in section 5. Activity records, including steps, prize draws and purchases, are retained. Learn more: Data Deletion page

9. Cookies

The Qozgal mobile App does not use cookies. Our website qozgal.app also does not use analytics or advertising cookies.

10. Children

Qozgal is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently received data from a child under 13, we will delete it immediately. Users from 13 to 18 use the App with the consent of a parent or legal guardian

If you are a parent or guardian and believe your child has provided us with their data, please contact us at support@qozgal.app.

11. Push Notifications

With your permission, the App may send push notifications, including:

• Reminders to maintain your activity streak;
• Notifications about prize draw eligibility;
• Information about new App features.

You can disable push notifications at any time in your device's operating system settings (iOS: Settings → Notifications → Qozgal; Android: Settings → Apps → Qozgal → Notifications).

Browser reminders on qozgal.app

A visitor can turn them on with a button on the site, and the browser asks for permission. Then one notification about the Qozgal app arrives every two days. For this we store the subscription address and encryption keys the browser provides, the page language, the browser's time zone and the country it points to, the device type (Android, iPhone or computer), how many notifications were sent and how many times they were tapped. This data is not linked to an app account. The notification text is encrypted for that browser and delivered through its push service (Google, Mozilla, Apple, Microsoft or Yandex), which sees only the subscription address. Reminders can be turned off with the button on the site, the «Turn off» button in the notification or in the browser settings, after which the subscription address and keys are deleted

12. Security

We implement technical and organizational measures to protect your data:

• All connections are secured by HTTPS/TLS;
• Authentication tokens are hashed and stored in encrypted form;
• Access to production data is restricted and logged;
• Regular software updates and security reviews.

Despite these measures, no system is completely secure. If you discover a security vulnerability, please report it to support@qozgal.app.

13. Policy Changes

We may periodically update this Privacy Policy. We will notify you of material changes through the App or by email at least 14 days before the changes take effect.

Continued use of the App after the changes take effect constitutes your acceptance of the updated Policy.

14. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan "On Personal Data and Its Protection".

15. Contact Us

For all questions related to the processing of personal data, please contact us:

• Email: support@qozgal.app
• Website: qozgal.app